VULNERABILITY INTELLIGENCE

CVE-2026-57914

CVSS score6.5 MEDIUM

EPSS probability0.44%

CISA KEVNot currently listed

Published2026-06-26

Last modified2026-10-25

Description

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.